Check currently running queries

Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain and check their CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.

To copy a query's LINQ script, select the row of the query. The script is displayed and the icon can be used to copy the script to the clipboard. You can also select the icon at the end of a row and click Show query.

To cancel a query, hover over the last column of a row, click the icon and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.